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SYSTEM AND METHOD FOR IDENTIFYING A SUBSCRIBER 
FOR CONNECTION TO A COMMUNICATION NETWORK 

CROSS-REFERENCE TO RELATED APPLICATIONS 
fyl This appllCcT tr iori io — related to an d filed cone urr£i±tty 

with pending U.S. Patent Application S.e~r-i'aT No, 



entitled "System and Method — 'for Determining Subscriber 
Information-r" " These applications have been commonly 
< r a'ssigne d_£^D--£i- sco Technology, lue ^ 



TECHNICAL FIELD OF THE INVENTION 

This invention relates in general to data 
10 communication, and more particularly to a system for 

identifying a subscriber for connection to a communication 
network . 
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BACKGROUND OF THE INVENTION 

Communication systems support the provisioning of 
voice, data, multimedia or other services and information 
to subscribers. A problem with prior communication systems 
is that a particular subscriber may pirate the services of 
another subscriber in the system without properly 
subscribing for the services. One solution to this problem 
is to assign a unique user name and password to the 
subscribers and to restrict access to particular services 
based upon a successful response to a query for a 
subscriber's user name and password. This solution is 
ineffective, however, when one subscriber assumes the 
identity of another subscriber by misappropriating the user 
name and password of the other subscriber and, thereby, 
obtains access to the other subscriber's services. 
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SUMMARY OF THE INVENTION 

In accordance with the present invention, the 
disadvantages and problems associated with prior 
communication systems have been substantially reduced or 
eliminated . 

In accordance with one embodiment of the present 
invention, a system for identifying a subscriber includes 
an access server coupled to a number of subscribers using 
a first communication network and further coupled to a 
second communication network, a memory coupled to the 
access server, and a processor coupled to the memory. The 
access server receives a communication from a particular 
subscriber using a particular one of a number of virtual 
circuits associated with the first communication network. 
The memory stores path information that identifies a 
virtual circuit assigned to the particular subscriber. The 
processor identifies the particular subscriber for 
connection to the second communication network based upon 
the path information and the particular virtual circuit 
used to receive the communication from the particular 
subscriber . 

Another embodiment of the present invention is a 
method for identifying a subscriber that includes receiving 
a communication from a particular one of a number of 
subscribers using a particular one of a number of virtual 
circuits associated with a first communication network. 
The method continues by storing path information that 
identifies a virtual circuit assigned to the particular 
subscriber. The method concludes by identifying the 
particular subscriber for connection to a second 
communication network based upon the path information and 
the particular virtual circuit used to receive the 
communication from the particular subscriber. 
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Yet another embodiment of the present invention is an 
information server that includes a memory and a processor. 
The memory stores path information for a number of 
subscribers coupled to an access server using a number of 
virtual circuits associated with a first communication 
network. The path information identifies a virtual circuit 
assigned to a particular subscriber. The processor 
identifies the particular subscriber for connection to a 
second communication network based upon the path 
information and a particular virtual circuit that couples 
the particular subscriber to the access server. 

Still another embodiment of the present invention is 
an access server that includes an interface coupled to a 
number of subscribers using a first communication network, 
a controller coupled to the interface, and a route 
processor coupled to the controller. The interface 
receives a communication from a particular subscriber using 
a particular one of a number of virtual circuits associated 
with the first communication network. The controller 
communicates a request to an information server for 
identifying the particular subscriber.. The identification 
request identifies the particular virtual circuit used to 
receive the communication from the particular subscriber. 
The route processor supports a communication session 
between the particular subscriber and a second 
communication network in response to identifying the 
particular subscriber . 

Technical advantages of the present invention include 
a system that identifies subscribers and determines 
subscriber information based, in part, upon path 
information and the particular virtual circuit used to 
receive a communication from a particular subscriber. 
Whereas in prior communication systems a particular 
subscriber may pirate the services of another subscriber by 
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misappropriating the other subscriber's user name and 
password, the present invention provides services based 
upon "trusted" information which is generally not 
discoverable by another subscriber. Such "trusted" 

information includes, for example, path information and 
information identifying the particular virtual circuit 
actually used to receive a communication from a particular 
subscriber. In this respect, subscribers of the present 
invention cannot access services and information designated 
for other subscribers. Therefore, the identification 
techniques of the present invention provide integrity to 
the communication system. 

Other technical advantages are readily apparent to one 
skilled in the art from the following figures, descriptions 
and claims. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

For a more complete understanding of the present 
invention and its advantages, reference is now made to the 
following description taken in conjunction with the 
accompanying drawings, in which like reference numbers 
indicate like features and wherein: 

FIGURE 1 illustrates a communication system according 
to the present invention; 

FIGURE 2 illustrates one embodiment of an access 
server used by the system; 

FIGURE 3 illustrates one embodiment of an 
identification table used by the system; 

FIGURE 4 illustrates one embodiment of a routing table 
used by the system; and 

FIGURE 5 illustrates a flowchart of an exemplary 
method according to the present invention. 
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DETAILED DESCRIPTION OF THE INVENTION 

FIGURE 1 illustrates a communication system 10 that 
includes subscribers 12 coupled to access servers 18 using 



servers 18 initiate the identification of a subscriber 12 
and, in response, communicate information to the subscriber 
12 and/or grant the subscriber 12 access to a second 
communication network 20. 

Subscribers 12 comprise any suitable number and 
combination of communication devices, such as customer 
premises equipment, that employ any appropriate 
communication techniques to communicate with access server 
18 using communication network 14. In one embodiment, 
subscribers 12 couple to a communication server 22 in the 
local loop using traditional twisted pair subscriber lines 
24 . Subscribers 12 and communication server 22 exchange 
information using high bandwidth digital subscriber line 
technology, referred to generally as XDSL. Communication 
server 22 may reside at a central office, remote terminal, 
or other access point in communication system 10 that 
allows coupling to local loops formed by twisted pair 
subscriber lines 24 . 

Subscribers 12 may also be associated with a local 
area network (LAN) , such as an Ethernet network 30, a token 
ring network 32, a fiber distributed data interface (FDDI) 
network, an asynchronous transfer mode (ATM) network 36, or 
any other association or arrangement of subscribers 12 in 
a network environment (referred to generally as LAN 3 0) . 
LAN 3 0 supports Ethernet (10 Mbps) , Fast Ethernet (10 0 
Mbps) , Gigabit Ethernet, switched Ethernet, or any other 
suitable networking protocol or technology. LAN 3 0 couples 
to communication network 14 using communication server 22, 
network interface 34, or any combination of communication 
server 22 and network interface 34. In one embodiment, 



a first communication network 14 . 



In general, 



access 
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network interface 34 comprises hubs, routers, bridges, 
gateways, and other suitable communication devices and 
related software that support suitable communication 
protocols to couple LAN 3 0 to communication network 14. 

Communication network 14 comprises a plurality of 
virtual circuits 16 that support communication between 
communication server 22, network interface 34, and access 
server 18-. In a particular embodiment, cgmmunication 
network 14 is part of a wide area network (WAN) that 
supports a suitable communication technology, such as ATM, 
frame relay, X.25 packet switching, statistical 
multiplexers, switched multi-megabit data service (SMDS) , 
high-level data link control (HDLC) , serial line Internet 
protocol (SLIP) , point-to-point protocol (PPP) , 
transmission control protocol/Internet Protocol (TCP/IP) or 
any other suitable WAN protocol or technology. Although 
the discussion below focuses on a particular ATM embodiment 
of communication network 14, communication system 10 
contemplates any suitable WAN protocol or technology. 

Access server 18 comprises any number and combination 
of interfaces, switches, routers, or any other suitable 
communication devices and related software that terminates 
a preassigned virtual circuit 16 for each subscriber 12. 
Access server 18 is described in greater detail with 
respect to FIGURE 2 . Access server 18 is coupled to an 
information server 50 using a link 52 . 

Communication network 20 comprises any combination of 
local area networks (LANs) , wide area networks (WANs) , 
global computer networks, hubs, routers, bridges, gateways, 
switches, servers, databases, or any other association of 
suitable wireline or wireless communication devices and 
networks, and related software, that provides subscribers 
12 access to voice, data, multimedia, or other services 
and/or information . 
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A service provider associated with communication 
network 20, such as an Internet Service Provider (ISP), 
may employ one or more access servers 18 to restrict access 
to network 2 0 based upon the proper identification of 
subscribers 12 . Access servers 18 may further be used to 
restrict access to information based upon the proper 
identification of subscribers 12. In general, system 10 
assigns to each subscriber 12 a unique virtual circuit 16 
that is to be used by the subscriber 12 to communicate with 
access server 18. When an access server 18 receives a 
communication from a particular subscriber 12, information 
server 50 identifies the subscriber 12 based, in part, upon 
the virtual circuit 16 assigned to the subscriber 12 and 
the virtual circuit 16 actually used to receive the 
communication from the subscriber 12 . 

Each virtual circuit 16 comprises a communication path 
between a particular subscriber 12 and an access server 18 
that supports the appropriate communication technology of 
communication network 14. Although the following 

description of the present invention is detailed with 
respect to virtual circuits 16 in an ATM networking 
environment, it should be understood that a virtual circuit 
16 assigned to a subscriber 12 in system 10 may be defined 
in any suitable networking environment using any suitable 
communication technologies and protocols, without deviating 
from the scope of the present invention. 

A virtual circuit 16 in an ATM networking environment 
comprises a series of virtual path identifiers (VPI) and 
virtual channel identifiers (VCI). Together, a VPI and a 
VCI identify the next destination of an ATM cell as it 
passes through a series of communication devices in network 
14 and terminates in access server 18. A unique virtual 
circuit 16 can therefore be assigned to each subscriber 12 
by storing predetermined virtual circuit information, such 
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as VPI and VCI information defining the virtual circuit 16, 
in communication server 22, network interface 34, and the 
communication devices associated with network 14 and access 
server 18 . 

5 Specific virtual circuit information defining some 

portion of a virtual circuit 16, such as the portion of the 
virtual circuit 16 coupled to communication server 22 
and/or communication server 34 or the portion of the 
virtual circuit 16 coupled to access server 18, may be used 
10 to identify uniquely the entire virtual circuit 16 to the 

other components of system 10, and is generally referred to 
as a "virtual circuit identifier." Therefore, for example, 
the virtual circuit identifier of a particular virtual 
circuit 16 may be defined using the VPI and VCI information 
15 for that portion of the virtual circuit 16 terminating in 

access server 18. 
v^/ ? Jnf n rma4^ioa^aa rvfir ... 50 c ore^i^-ff f^p;^--p^ — e 
to a memory 56. Processor 54 may comprise a central 
processing unit associated with a computer systems/such as 
20 a mainframe, a workstation, or any other suitable general 

purpose data processing facility. Memory S^comprises, any 
suitable volatile or non-volatile memory/aevice associated 
with processor 54. Memory 56 generally stores a number of 
files, lists, tables, or any /other arrangement of 
25 information that supports the identification of subscribers 

12 in system 10. For ✓Example, memory 56 includes 

identification table 58/having. path information 60 and 
subscriber information 62 for subscribers 12 in system 10. 
Path information &6 comprises virtual circuit information 
30 identify the /unique virtual circuits 16 assigned to 

subscribers/12 (e.g., virtual circuit identifiers), access 
server / information, interface information, user 
inf orrpdt ion, and/or any other type of inf ormat ion^used to 

rn~f~arma1 




i dentify sjibs-C-r-i-bers 12 . 
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ijomprig gs address inrormation, configurati on inrormg ttogr* 
and/orany^ottiep-- su-i-tabie information used to upgrade, 
rrfonltor, modify -; — or oL herwrs e operate sub tjcrlberS^l -5^ 

The components .and information stored in information 
server 5 0 may be arranged integral to or remote from access 
server 18. Furthermore, information server 50 may comprise 
any combination of processors 54 and memory 5 6 to form any 
number of separate information servers 50 that may each be 
accessed by access server 18 using appropriate 
communication protocols. For example, information server 
5 0 may comprise any number and combination of information 
servers 50 that may be accessed using a RADIUS protocol, a 
Trivial File Transfer Protocol ("TFTP"), a Dynamic Host 
Configuration Protocol ("DHCP"), or any suitable 
communication protocol . 

In operation, access server 18 supports the 
provisioning of services to subscribers 12 in system 10. 
In particular, access server 18 receives a communication 
from a particular subscriber 12 using a particular one of 
the virtual circuits 16 associated with communication 
network 14 . The communication issued by subscriber 12 may 
comprise the initiation of a point-to-point protocol 
session, a TFTP broadcast message, or any suitable request 
for services. In one example, a subscriber 12 requests 
connectivity to communication network 20. In another 
example, a subscriber 12 requests subscriber information 
62 . Prior to granting the subscriber 12 access to network 
2 0 or communicating subscriber information 62 to the 
subscriber 12, access server 18 and/or information server 
50 identify subscriber 12 based, in part, upon path 
information 60 associated with the particular subscriber 12 
and the particular virtual circuit 16 actually used by the 
access server 18 to receive the communication from the 
particular subscriber 12 . 
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A problem with prior communication systems is that a 
particular subscriber 12 may assume the identity of another 
subscriber 12, such as by using a misappropriated user name 
and password, and thereby pirate the services of the other 
subscriber 12 . A particular advantage of the present 
invention is that path information 60 for a particular 
subscriber 12 is information that is generally not 
discoverable by another subscriber 12 and, therefore, is 
not easily misappropriated by other subscribers 12 . System 
10, therefore, overcomes the disadvantages of prior 
communication systems by identifying a particular 
subscriber 12 based, in part, upon path information 60 and 
the particular virtual circuit 16 used by access server 18 
to receive a communication from the particular subscriber 
12. Accordingly, system 10 identifies subscribers 12 to 
support provisioning the proper services to the proper 
subscribers 12 . 

FIGURE 2 illustrates access server 18 in more detail. 
Virtual circuits 16 of communication network 14 couple to 
one or more interfaces 70. Each interface 70 couples to an 
associated first port 72 of a switch fabric 74 . A number 
of route processors 76 couple to second ports 78 of switch 
fabric 74. Route processors 76 also couple to interface 
80, which in turn couples to communication network 20. In 
a particular embodiment, interfaces 70, switch fabric 74, 
route processors 76, and interface 80 reside in a single 
housing, rack mount, or other arrangement of integrated or 
separate components at a single location in communication 
system 10. 

A controller 82 manages the overall operation of 
access server 18 . Controller 82 communicates information 
with components of access server 18 using bus 84 . A memory 
86 coupled to controller 82 stores program instructions 88 
and an access server identifier 90. Interfaces 70, switch 
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fabric 74, route processors 76, and interface 80 access 
memory 86 directly using bus 84 or indirectly using 
controller 82 . Alternatively, information maintained in 
memory 86 may reside in different components of access 
5 server 18 or in components external to access server 18. 

Program instructions 88 include software code, 
parameters, protocols, and other instructions and data 
structures that controller 82 accesses and executes to 
generate and communicate a request 104, such as an 

10 identification request, to information server 50. Access 

server identifier 90 comprises any suitable information, 
such as a management IP address, uniquely identifying 
access server 18 to the other components of system 10. 

Each interface 70 comprises any suitable combination 

15 of hardware and software components that terminate virtual 

circuits 16 in. access server 18. In one embodiment, an 
interface 70 comprises one or more network line cards 92, 
each network line card 92 having an interface identifier 
94. An interface identifier 94 may comprise a module 

20 identifier, a slot identifier, a port identifier, or any 

other suitable information used to identify an interface 70 
uniquely within access server 18. 

Switch fabric 74 comprises any suitable combination of 
hardware and software components that directs, couples, 

25 and/or switches information communicated by subscribers 12 

to a selected route processor 76 and/or controller 82 . 
Switch fabric 74 maintains virtual circuit identifiers 96 
reported to it by one or more components of communication 
network 14. Virtual circuit identifiers 96 may also reside 

30 in memory 86. Virtual circuit identifiers 96 comprise any 

suitable information that uniquely identifies the virtual 
circuit 16 upon which a particular communication 102 is 
received from a particular subscriber 12 by access server 
18. In one embodiment, a virtual circuit identifier 96 may 
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be defined using the VPI and VCI information for that 
portion of a particular virtual circuit 16 terminating in 
the access server 18. 

Each route processor 76 comprises any suitable 
combination of hardware and software components that 
perform termination, conversion, segmentation, reassembly, 
addressing, and other functions supported by routers, 
bridges, gateways, multiplexers, and other WAN and LAN 
networking devices. Each route processor 76 maintains a 
routing table 98. Routing table 98 maintains information 
that allows route processor 76 to route information between 
communication network 14 using interface 7 0 and 
communication network 20 using interface 80 according to 
communication sessions established by access server 18 in 
response to identifying subscribers 12 . Routing table 98 
is described in greater detail with reference to FIGURE 4. 

Interface 80 comprises any suitable combination of 
hardware and software components that communicate 
information received from route processors 7 6 to 
communication network 20 using any suitable communication 
protocols. Controller 82 couples to information server 50 
using link 52 and comprises any suitable combination of 
hardware and software components that execute program 
instructions 88 to initiate the identification of 
subscribers 12 in system 10. 

In operation, access server 18 receives a 
communication 102 from subscriber 12 using a particular 
virtual circuit 16. The virtual circuit identifier 96 for 
the virtual circuit 16 upon which communication 102 was 
received is determined by switch fabric 74 . Controller 82 
receives and examines communication 102 to determine if it 
contains a request for services. For example, 

communication 102 may include a request for subscriber 
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information 62 and/or a request for access to communication 
network 2 0 . 

If communication 102 includes a request for services, 
controller 82 executes program instructions 88 to generate 
a request 104 for communication to information server 50 to 
identify the subscriber 12 that sent communication 102. 
Controller 82 generates request 104 according to any- 
suitable communication protocols used by information server 
50, such as TFTP, DHCP or RADIUS protocol. Request 104 
includes any appropriately formatted or configured 
combination of request parameters, such as an appropriate 
access server identifier 90, interface identifier 94, and 
virtual circuit identifier 96. 

Information server 50 receives request 104 and 
identifies subscriber 12 based upon path information 60 and 
the request parameters included in request 104 . In 
particular, information server 50 identifies subscriber 12 
if an entry exists in identification table 58 that is 
indexed by path information 6 0 corresponding to the request 
parameters included in request 104. For example, if 
processor 54 locates an entry in identification table 58 
indexed by path information 60 corresponding to the access 
server identifier 90, the interface identifier 94, and the 
virtual circuit identifier 96 communicated in request 104, 
then processor 54 identifies subscriber 12 . 

Upon identifying subscriber 12, information server 50 
and/or access server 18 provide the services requested by 
subscriber 12 in communication 102. For example, 

information server 50 and/or access server 18 communicates 
particular subscriber information 62 to subscriber 12 
using, for example, communication network 14. In another 
example, access server 18 initiates a connection between 
subscriber 12 and communication network 20, such as by 
establishing a communication session between subscriber 12 
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and one or more communication devices associated with 
communication network 20. 

A particular advantage provided by the present 
invention is that system 10 identifies subscribers 12 based 
upon "trusted" information to which subscribers 12 cannot 
readily gain access, such as path information 60, access 
server identifiers 90, interface identifiers 94, and 
virtual circuit identifiers 96. In this respect, 

subscriber 12 cannot access services designated for other 
subscribers 12 by misappropriating the user name and 
password of the other subscribers 12. Therefore, the 
identification techniques of the present invention provide 
integrity to communication system 10. 

FIGURE 3 illustrates the contents of identification 
table 58 stored in memory 56 of information server 50. 
Each entry of identification table 58 includes path 
information 60 and subscriber information 62 for each 
subscriber 12 . In particular, path information 60 includes 
virtual circuit information 110, interface information 112, 
and access server information 114. In one embodiment., path 
information 60 further includes user information 116. 

Virtual circuit information 110 identifies virtual 
circuits 16 assigned to subscribers 12 . In a particular 
embodiment, virtual circuit information 110 may include a 
VPI , a VCI, or any other information that uniquely 
identifies a virtual circuit 16 assigned to the 
corresponding subscriber 12 . As with virtual circuit 
identifiers 96, virtual circuit information 110 may be 
defined using, the VPI and VCI information for that portion 
of an assigned virtual circuit 16 terminating in the access 
server 18. One particular ATM implementation includes an 
eight bit VPI and a sixteen bit VCI, as illustrated having 
two numbers separated by period. Another implementation 
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includes decimal values for VPI and VCI separated by a 
slash . 

Interface information 112 identifies interfaces 70 
assigned to subscribers 12 to terminate the virtual 
circuits 16 identified by corresponding virtual circuit 
information 110. In a particular embodiment, interface 
information 112 includes information identifying the slot, 
module, and port of a network line card 92 of interface 70. 
Access server information 114 identifies access servers 18 
assigned to subscribers 12 to terminate the virtual 
circuits 16 identified by corresponding virtual circuit 
information 110 . 

User information 116 identifies user names and 
passwords assigned to the corresponding subscribers 12 
and/or the users of subscribers 12. For example, user 
information 116 may identify the user name and password for 
customer premises equipment associated with subscriber 12 . 
In another example, user information 116 may identify the 
user name and password for a user of a communication 
device, such as a computer, coupled to the customer 
premises equipment of subscriber 12. In this respect, 
system 10 supports the identification of subscribers 12 and 
the users of subscribers 12 . 

Subscriber information 62 comprises address 
information 118 and configuration information 120 that may 
be communicated to a corresponding subscriber 12 upon 
identification. Address information 118 includes a 

numerical or textual representation of one or more Internet 
protocol addresses, a network/node designation, netmask 
attributes, or any other network addresses used by 
subscriber 12 to communicate with communication network 20. 
Configuration information 120 includes configuration files, 
firmware patches, or any other suitable information used to 
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upgrade, monitor, modify, or otherwise operate subscribers 
12 . 

It should be understood that information 110-120 is 
arranged in separate columns of identification table 58 for 
illustrative purposes only, and that the contents of 
information 110-12 0 may be formatted or configured in any 
manner suitable for storage and/or communication using the 
communication protocols of information server 50. For 
example, identification table 58 may store the contents of 
information 110-12 0 according to any suitable format or 
configuration associated with TFTP, DHCP or RADIUS 
protocol. If path information 60 is formatted according to 
a * particular communication protocol associated with 
information server 50, then it should be understood that 
the information communicated in request 104 may also be 
formatted in the particular communication protocol to 
support a consistent and accurate identification of 
subscribers 12 . 

Information server 50 identifies a particular 
subscriber 12 based upon path information 60 and the 
request parameters communicated by access server 18 in 
request 104. As described ' above , request 104 includes a 
virtual circuit identifier 96 of the particular virtual 
circuit 16 upon which access server 18 received 
communication 102. Request 104 further includes an 
interface identifier 94 indicating the interface 70 
terminating the virtual circuit 16 used by the subscriber 
12 to send communication 102 . Request 104 also includes 
access server identifier 90 indicating the network address 
of the access server 18 receiving communication 102 from 
subscriber 12. Processor 54 identifies the subscriber 12 
that sent communication 102 if processor 54 identifies an 
entry in identification table 58 having virtual circuit 
information 110, interface information 112, and access 
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server information 114 corresponding to the virtual circuit 
identifier 96, interface identifier 94, and access server 
identifier 90, respectively, communicated in request 104. 

In one embodiment, request 104 further includes a user 
name and password sent by subscriber 12 in communication 
102. In this embodiment, processor 54 identifies an entry 
in identification table 58 indexed by user information 116 
corresponding to the user name and password provided in 
request 104. Processor 54 identifies subscriber 12 if the 
virtual circuit information 110, interface information 112, 
and access server information 114 associated with the 
identified user information 116 corresponds to the virtual 
circuit identifier 96, interface identifier 94, and access 
server identifier 90 communicated in request 104. 

Upon identifying the subscriber 12, access server 18 
and/or information server 50 provides the services 
requested by subscriber 12 in communication 102. For 
example, access server 18 and/or information server 5 0 
communicates the appropriate address information 118 and/or 
configuration information 12 0 to the corresponding 
subscriber 12 using, for example, communication network 14 
or any other suitable link to subscriber 12 . In another 
example, access server 18 initiates the connection between 
subscriber 12 and communication network 20, such as by 
establishing a communication session between subscriber 12 
and one or more communication devices associated with 
communication network 20, and by modifying routing table 98 
to support the communication session. 

FIGURE 4 illustrates the contents of routing table 98 
associated with route processors 76 of access server 18. 
Each entry in routing table 98 includes session information 
130, address information 132, mapping information 134, 
address information 136, and routing information 138. 
Session information 130 is a unique or different designator 
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assigned to each communication session' initiated by access 
server 18 upon identification of a subscriber 12. Address 
information 13 2 represents a network address used by the 
subscriber to connect to communication network 2 0 during a 
corresponding communication session. In one embodiment, 
address information 132 comprises address information 118 
issued to subscriber 12 upon identification. 

Mapping information 134 includes a VPI 7 a VCI , 
identifiers for ports associated with interface 80 , or any 
other information that enables interface 80 to convey 
information received from route processors 76 to 
communication network 20. In a particular embodiment, 
interface 80 includes a switching capability that allows 
segmentation of communication network 2 0 for more 
efficient, modular, and fault tolerant communication. 
Information 134 may also be used by interface 80 to direct 
information received from communication devices associated 
with communication network 2 0 to a particular route 
processor 76. 

Address information 13 6 is a numerical or textual 
representation of an Internet protocol address, a 
network/node designation, or any other network address used 
to deliver information to a particular domain, 
communication device, or any other suitable recipient 
within communication network 20. Route processor 76 may 
convert address information 13 6 for each session into an 
appropriate format, depending on the particular 
implementation of access server 18 and communication 
network 2 0 . 

Routing information 138 includes routing information 
protocol (RIP) information, open- shortest -path- first (OSPF) 
information, or any other suitable routing information that 
provides the most efficient, available, or optimum path to 
communicate information to a particular communication 
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device associated with communication network 20. Routing 
information 138 identifies particular nodes, paths, or 
other intermediate devices that establish a desirable route 
to the appropriate destination communication device within 
5 communication network 20. 

Upon identification of a subscriber 12 as described 
with reference to FIGURES 1-3, access server 18 may 
establish and support a communication session between the 
identified subscriber 12 and communication network 20. In 

10 particular, access server 18 creates an entry for 

subscriber 12 in routing table 98 having session 
information 13 0, address information 132, mapping 
information 134, address information 136, and routing 
information 13 8, and supports the communication session 

15 according to information 130-138. Upon the expiration of 

a communication session (e.g., time out, user termination, 
equipment malfunction) access server 18 removes the 
corresponding entry in routing table 98 . 

FIGURE 5 illustrates a flowchart of an exemplary 

2 0 method according to the present invention. The method 

begins at step 150 where information server 50 stores path 
information 60 in identification table 58. Path 
information 60 includes virtual circuit information 110, 
interface information 112, and access server information 

25 114. Execution proceeds to step 152 where information 

server 50 stores subscriber information 62 indexed by path 
information 60. Subscriber information 62 includes address 
information 118 and configuration information 120. 

Access server 18 receives communication 102 from a 

30 particular subscriber 12 at step 154. Controller 82 of 

access server 18 determines the appropriate request 
parameters for communication 102 at step 156, such as the 
appropriate access server identifier 90, interface 
identifier 94, and virtual circuit identifier 96. 
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Controller 82 generates and communicates request 104 at 
step 158. Request 104 generally includes the request 
parameters determined at step 156. 

Processor 54 of information server 50 determines 
5 whether the subscriber 12 is identified at step 160. In 

particular, processor 54 determines whether an entry in 
identification table 58 includes virtual circuit 
information 110, interface information 112, and access 
server information 114 corresponding to virtual circuit 

10 identifier 96, interface identifier 94, and access server 

identifier 90 communicated in request 104. If not, 
execution proceeds to step 162 where information server 50 
and/or access server 18 indicates to subscriber 12 that 
identification has failed. Execution then proceeds to step 

15 154. 

If subscriber 12 is identified as determined at step 
160, execution proceeds to step 164 where access server 18 
and/or information server 5 0 provide to subscriber 12 the 
requested services and/or information. In one example, 

20 access server 18 and/or information server 50 may 

communicate subscriber information 62 to subscriber 12 . In 
another example, access server 18 initiates a communication 
session between subscriber 12 and communication network 20. 
Access server 18 determines whether it has received another 

25 communication 102 at step 166. If so, execution returns to 

step 154. If not, execution terminates at step 168. 

Although the present invention has been described in 
several embodiments, a myriad of changes, variations, 
alterations, transformations, and modifications may be 

3 0 suggested to one skilled in the art, and it is intended 

that the present invention encompass such changes, 
variations, alterations, transformations, and modifications 
as fall within the spirit and scope of the appended claims. 



